Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.5
CVSSv3

CVE-2016-2839

Published: 05/08/2016 Updated: 16/08/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Subscribe to Linux

Vulnerability Summary

Mozilla Firefox prior to 48.0 and Firefox ESR 45.x prior to 45.3 on Linux make cairo _cairo_surface_get_extents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote malicious users to cause a denial of service (application crash) via a crafted video.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox_esr 45.2.0

mozilla firefox_esr 45.1.0

mozilla firefox

mozilla firefox_esr 45.3.0

mozilla firefox_esr 45.1.1

Vendor Advisories

Ubuntu Security Notice: firefox vulnerabilities
Firefox could be made to crash or run programs as your login if it opened a malicious website ...
Mozilla: Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
Mozilla Foundation Security Advisory 2016-65 Cairo rendering crash due to memory allocation issue with FFmpeg 010 Announced August 2, 2016 Reporter Bert Massop Impact Moderate Products Firefox, Firefox ESR Fixed in ...
Red Hat: CVE-2016-2839
Mozilla Firefox before 480 and Firefox ESR 45x before 453 on Linux make cairo _cairo_surface_get_extents calls that do not properly interact with libav header allocation in FFmpeg 010, which allows remote attackers to cause a denial of service (application crash) via a crafted video ...

References

CWE-20https://bugzilla.mozilla.org/show_bug.cgi?id=1275339http://www.mozilla.org/security/announce/2016/mfsa2016-65.htmlhttp://www.ubuntu.com/usn/USN-3044-1http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.htmlhttp://www.securityfocus.com/bid/92261https://security.gentoo.org/glsa/201701-15http://www.securitytracker.com/id/1036508https://usn.ubuntu.com/3044-1/https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21991CVE-2024-32674path traversalCVE-2023-21987denial of servicedosCVE-2024-4647CVE-2024-25519CVE-2024-33612
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook